I'm sorry for your bad experience with zpool, however this is not the support thread for zpool.

What kind of 2FA would you like? Google Authenticator?

Yes that would be perfect!

I'm on it, testing it currently, should be available soon.

How is the testing going on. I'm sure you had to put it on hold a bit to get the new V3 stake for Decred fixed up.

Yes I had to get v3 working first.

I'm back on it - it's not so easy as thought, where would you like to have it ? right when you log-in or when you withdraw / edit profile etc ?

I think it's best for payouts. Coinotron just does it for payout so can easily leave cookies for logging onto site to check status but if making a payout request, unlock request, or wallet address change make it require the 2FA. Once that is implemented you can pretty much leave lock out mostly automated as it will require 2FA for those who use it and much safer than email Thanks